ALSA-2026:93439: Important: libXi security update

Q: Which AlmaLinux packages are covered by this update?

The update covers the libxi runtime library and the libxi-devel development package.

Q: When was this advisory published and last modified?

It was published on 2026-11-02 and last modified on 2026-11-03.

Published Nov 2, 2026

Updated

X.Org X11 libXi runtime library

Security Fix(es):

libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply (CVE-2026-109090) libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow (CVE-2026-109089)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

2 affected componentsFixes available

almalinux/libxi<1.7.10-8.el9_8.3

1.7.10-8.el9_8.3

almalinux/libxi-devel<1.7.10-8.el9_8.3

1.7.10-8.el9_8.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/libXi to a version that resolves this vulnerability.
Fixed in 1.7.10-8.el9_8.3
Upgrade
Upgrade almalinux/libXi-devel to a version that resolves this vulnerability.
Fixed in 1.7.10-8.el9_8.3

Event History

Nov 2, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which AlmaLinux packages are covered by this update?